Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
File:                     3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa (raw, json)
Hash identifier:          ikKtFWT/9BW5lXRpeZvHyXVAVsueMJqB3hLRsmxyWxY=
Subject key identifier:   C8:BD:EA:88:AA:1E:97:12:7F:F2:CF:69:7F:8D:AA:E9:F4:B9:AC:BF
Certificate issuer:       /CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
Certificate serial:       62CDA3A3F5400F5B276455095E040FC167ED3885
Authority key identifier: 91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa
Signing time:             Tue 01 Apr 2025 15:16:01 +0000
ROA not before:           Tue 01 Apr 2025 15:11:01 +0000
ROA not after:            Tue 31 Mar 2026 15:16:01 +0000
asID:                     262503
IP address blocks:        177.66.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cd:a3:a3:f5:40:0f:5b:27:64:55:09:5e:04:0f:c1:67:ed:38:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910C13ACE16F58034FB65130B4A6FFAA2E062704
        Validity
            Not Before: Apr  1 15:11:01 2025 GMT
            Not After : Mar 31 15:16:01 2026 GMT
        Subject: CN=C8BDEA88AA1E97127FF2CF697F8DAAE9F4B9ACBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:22:0e:2f:9a:a9:da:d9:d2:da:03:29:1f:b8:
                    d9:99:4b:ac:93:7e:9b:b8:5d:c1:3b:e6:75:30:23:
                    ce:b8:67:cb:9f:a3:c7:08:5b:66:79:0f:dc:85:92:
                    0f:e6:71:1a:f3:5d:87:50:ae:73:be:90:a7:05:d2:
                    f4:1b:7e:46:df:e7:a7:e0:79:3b:29:99:9b:58:9c:
                    ae:f0:af:69:81:7a:0d:a2:a3:1e:09:db:93:32:fc:
                    69:ac:bd:ef:a2:32:42:05:84:1c:26:9f:bc:0c:7c:
                    dc:1b:95:72:d5:89:93:64:8b:88:ce:d2:87:65:0e:
                    01:18:71:f6:cc:00:db:5d:aa:18:84:d5:a3:df:e0:
                    e1:7b:d2:a6:17:5a:c4:c6:db:b7:22:dd:50:e5:cc:
                    a8:48:0b:f0:4f:b5:1d:f7:b8:14:f5:d8:23:c8:2e:
                    c3:b5:e8:fd:be:33:19:f8:e2:96:dc:ff:f2:1a:35:
                    22:81:9e:a0:37:8c:3d:58:6f:52:10:28:85:e5:70:
                    88:24:ef:66:8a:b5:21:b9:c1:55:d9:32:62:e0:17:
                    98:ec:ba:4e:e7:59:3e:13:34:d1:d9:4d:e9:22:16:
                    3f:a3:86:fd:c5:fc:d3:97:30:af:09:c4:1d:d4:30:
                    6d:3a:bb:c5:c9:35:80:44:e5:50:4d:da:4a:76:06:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BD:EA:88:AA:1E:97:12:7F:F2:CF:69:7F:8D:AA:E9:F4:B9:AC:BF
            X509v3 Authority Key Identifier:
                keyid:91:0C:13:AC:E1:6F:58:03:4F:B6:51:30:B4:A6:FF:AA:2E:06:27:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/910C13ACE16F58034FB65130B4A6FFAA2E062704.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910C13ACE16F58034FB65130B4A6FFAA2E062704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3137372e36362e3139322e302f32332d3233203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:e9:31:3d:a5:9f:42:92:b8:43:76:8f:bf:5c:f5:b9:a4:
         f4:46:30:d0:d0:bc:09:a8:25:b0:a0:dd:9b:d7:f0:ef:e6:27:
         84:fc:52:9b:5f:07:10:c5:61:20:21:13:49:be:3a:ea:ad:ca:
         b3:7b:eb:4a:60:c0:79:11:3b:9d:e7:81:e9:55:17:af:06:dd:
         c5:14:23:0d:c5:46:7b:79:55:4c:2e:81:13:29:63:68:6f:62:
         c5:51:48:3b:42:97:14:a2:a7:32:a6:6c:96:d0:d0:e8:08:5c:
         5d:73:50:e9:21:ce:3c:73:40:61:a5:63:8f:71:f6:8b:eb:ab:
         a5:81:d2:69:9d:df:4a:95:30:72:ef:23:1b:1a:0d:f0:f2:c9:
         3b:fe:ec:f9:15:5a:df:a2:99:83:63:f7:2c:6d:02:fc:a3:57:
         36:bf:d9:c4:e5:52:7f:eb:f1:3e:3c:d4:66:ea:26:a0:6a:1c:
         1b:e4:23:be:12:ff:8d:32:36:4d:92:d7:b0:57:db:b8:e4:58:
         e8:ea:ee:94:19:a5:d8:c5:af:4c:ab:c2:b0:9c:30:b8:5c:4d:
         93:84:7a:81:0b:9a:7c:36:53:3b:12:79:7a:1c:97:56:1c:07:
         0c:3b:b9:1a:93:d5:e7:3a:08:ac:f3:53:eb:4e:c7:f7:e2:86:
         ff:d3:92:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:51:19 2025 by rpki-client